Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          bVcZnhJAs08Wv/0GZJbhp4LiF1l7CNxHWScODoha+nw=
Subject key identifier:   0A:A8:EC:3F:6F:65:C7:1A:D9:D3:54:26:58:29:71:7F:75:7D:50:A2
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       7D51743FA909F9684ECC553F501E27AF7E506ED7
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 04 Sep 2024 12:36:01 +0000
ROA not before:           Wed 04 Sep 2024 12:31:01 +0000
ROA not after:            Wed 03 Sep 2025 12:36:01 +0000
asID:                     264891
IP address blocks:        168.227.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:51:74:3f:a9:09:f9:68:4e:cc:55:3f:50:1e:27:af:7e:50:6e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Sep  4 12:31:01 2024 GMT
            Not After : Sep  3 12:36:01 2025 GMT
        Subject: CN=0AA8EC3F6F65C71AD9D354265829717F757D50A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:f6:7b:fe:2d:b6:23:ec:61:35:96:01:1f:
                    0c:18:14:06:55:2e:3b:b7:1a:a7:1f:ca:1f:7c:47:
                    8f:7c:c9:45:02:75:9d:6b:9f:af:05:d6:54:3b:c2:
                    42:29:2c:d6:13:98:39:87:0a:bf:87:fa:e9:95:07:
                    80:01:83:a7:1b:3b:c3:a0:63:23:9e:e7:15:5c:4d:
                    aa:10:f9:f7:f7:06:82:e8:40:e0:6c:62:94:40:7a:
                    66:30:c9:66:39:a6:eb:c3:38:31:3b:20:bd:2f:5d:
                    d1:c8:40:df:6c:fc:6a:ef:cf:1a:ae:31:af:d8:2c:
                    5e:31:9f:03:99:bb:b2:d2:cf:f7:6c:03:ab:f8:2c:
                    cb:70:e1:41:ba:9c:4b:ed:38:76:99:a6:64:e4:96:
                    53:9c:87:9e:70:b7:4e:54:a8:17:f0:95:69:b7:35:
                    45:26:56:be:9d:dd:ec:4d:df:36:1a:1f:7a:b9:5f:
                    1c:a2:33:2f:cd:e2:1c:50:9d:fd:58:a6:40:e5:2a:
                    ac:77:94:ed:82:a1:15:ac:e6:d2:b5:31:41:8f:f9:
                    41:35:83:6b:6d:ca:e9:0f:22:85:d5:a2:82:f7:2f:
                    97:77:bc:3e:9a:57:59:25:0d:88:39:eb:66:9b:d9:
                    be:c1:ca:05:b7:85:5a:bd:52:27:d1:48:3a:3e:ce:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A8:EC:3F:6F:65:C7:1A:D9:D3:54:26:58:29:71:7F:75:7D:50:A2
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:78:d7:93:b5:37:11:cc:cf:10:ee:ae:f2:80:68:91:0a:
         77:85:88:7f:1e:05:f2:24:02:f3:da:eb:92:c0:f0:a4:4e:3f:
         e2:9f:bd:66:4e:79:6d:19:9e:3c:5e:f2:94:b6:96:2e:f0:4d:
         58:df:54:b4:77:1d:55:15:b4:07:27:91:89:2a:d9:4c:03:98:
         29:4b:2a:7e:10:61:33:86:a9:fd:f8:77:9f:3f:5b:76:e7:e0:
         b1:c6:e3:bb:19:9f:29:6e:64:0f:a2:db:82:fd:8c:19:8f:b6:
         0f:24:03:d7:c6:f0:bd:cb:e0:62:79:c3:ce:6e:78:53:81:91:
         36:6f:9d:fa:51:5e:14:0a:ec:a0:b1:36:2b:4a:e3:7e:5f:7c:
         e2:eb:a5:e0:da:8a:4d:ae:92:1e:27:43:25:ce:6d:5f:fc:47:
         54:6e:1c:2c:47:c4:5f:89:e6:81:64:f9:19:09:2d:65:de:cb:
         3b:80:3c:5d:91:3a:dd:e4:99:03:9b:e9:30:1e:e8:44:fd:03:
         e6:6a:8e:fd:b7:c3:6b:b1:d3:30:41:0d:fe:d1:ad:16:9f:3c:
         77:e1:00:68:f0:4b:86:bb:0c:5c:b2:e8:c1:9a:92:bd:a6:c1:
         8e:0e:24:c6:e7:33:05:97:11:ac:28:4c:ab:e8:a0:62:95:d4:
         9c:ed:6f:73
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfVF0P6kJ+WhOzFU/UB4nr35QbtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNDA5MDQxMjMxMDFaFw0yNTA5MDMxMjM2MDFaMDMxMTAvBgNV
BAMTKDBBQThFQzNGNkY2NUM3MUFEOUQzNTQyNjU4Mjk3MTdGNzU3RDUwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfIvZ7/i22I+xhNZYBHwwYFAZV
Lju3Gqcfyh98R498yUUCdZ1rn68F1lQ7wkIpLNYTmDmHCr+H+umVB4ABg6cbO8Og
YyOe5xVcTaoQ+ff3BoLoQOBsYpRAemYwyWY5puvDODE7IL0vXdHIQN9s/Grvzxqu
Ma/YLF4xnwOZu7LSz/dsA6v4LMtw4UG6nEvtOHaZpmTkllOch55wt05UqBfwlWm3
NUUmVr6d3exN3zYaH3q5XxyiMy/N4hxQnf1YpkDlKqx3lO2CoRWs5tK1MUGP+UE1
g2ttyukPIoXVooL3L5d3vD6aV1klDYg562ab2b7BygW3hVq9UifRSDo+zvd5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCqjsP29lxxrZ01QmWClxf3V9UKIwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjcTANBgkqhkiG9w0BAQsFAAOCAQEAnHF4
15O1NxHMzxDurvKAaJEKd4WIfx4F8iQC89rrksDwpE4/4p+9Zk55bRmePF7ylLaW
LvBNWN9UtHcdVRW0ByeRiSrZTAOYKUsqfhBhM4ap/fh3nz9bdufgscbjuxmfKW5k
D6Lbgv2MGY+2DyQD18bwvcvgYnnDzm54U4GRNm+d+lFeFArsoLE2K0rjfl984uul
4NqKTa6SHidDJc5tX/xHVG4cLEfEX4nmgWT5GQktZd7LO4A8XZE63eSZA5vpMB7o
RP0D5mqO/bfDa7HTMEEN/tGtFp88d+EAaPBLhrsMXLLowZqSvabBjg4kxuczBZcR
rChMq+igYpXUnO1vcw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org